Skip to main content
BlueXP ransomware protection

Scan for personally identifiable information with BlueXP classification

Contributors amgrissino

Within the BlueXP ransomware protection service, you can use BlueXP classification, a core component of the BlueXP family, to scan and classify your data on a file share workload. Classifying data helps you identify whether your data includes personally identifiable information (PII), which can increase security risks.

Important BlueXP classification can be deployed on-premises, in the cloud (non-SaaS deployments), or as a SaaS model in a technology Preview. When using non-SaaS deployments or existing deployments, scanning for Pii data in BlueXP ransomware protection is generally available and not in Preview. To enable Preview features, use the BlueXP ransomware protection Settings option. Refer to Configure BlueXP ransomware protection settings.
Tip This process can impact workload importance to help you ensure that you have the appropriate protection.

Enable BlueXP classification

Before you use BlueXP classification within the BlueXP ransomware protection service, you need to enable BlueXP classification to scan your data.

Tip You do this only once; you don't have to enable BlueXP classification again if you choose another file share workload on which to identify exposure.

By using the BlueXP classification UI as an alternate method, an administrator can enable BlueXP classification in BlueXP ransomware protection.

For details about BlueXP classification before you begin to use the service, it might be helpful to review these resources.

Steps
  1. From the BlueXP ransomware protection menu, select Protection.

  2. In the Protection page, locate a file share workload in the Workload column.

    Protection page showing Privacy exposure column

  3. To enable BlueXP classification to scan your data for personally identifiable data, in the Privacy exposure column, select Identify exposure.

    Identify sensitive data screen

  4. Review the information about BlueXP classification.

  5. Select Identify.

Result

BlueXP classification installs a BlueXP Connector, remotely connects to your workload data and scans it in the NetApp cloud (Amazon Web Services, us-west-1). Only identified insights and metrics remain the the NetApp cloud.

Note Scanning might take several minutes depending on the amount of data. The Protection page shows that BlueXP classification is identifying files and gives you an indication of the number of files it is scanning.

When scanning is complete, the Privacy exposure column displays the exposure level as Low, Medium, or High.

Review the privacy exposure

After BlueXP classification scans for personally identifiable information (PII), you can look at the Pii data risk.

PII data can have one of the following privacy exposure risk statuses.

  • High: Greater than 70% of files have PII

  • Medium: Greater than 30% and less than 70% of files have PII

  • Low: Greater than 0 and less than 30% of files have PII

Steps
  1. From the BlueXP ransomware protection menu, select Protection.

  2. In the Protection page, locate the file share workload in the Workload column that shows a status in the Privacy exposure column.

    Protection page showing Privacy exposure column

    Tip If the status changes, an up or down arrow appears in the Privacy exposure column to indicate the Privacy exposure change.
  3. Select the workload link in the Workload column to see workload details.

    Workload details screen showing the Privacy exposure tile

  4. In the Workload details page, review the information in the Privacy exposure tile.

    Tip If the privacy exposure change affects the workload importance, an up or down arrow appears next to the Workload Importance status.

Impact of privacy exposure on workload importance

Privacy exposure changes can impact the workload importance.

When privacy exposure: From this privacy exposure To this privacy exposure Then, workload importance does this:



.

Decreases

High, Medium, or Low

Medium, Low, or None

Remains the same

Increases

None

Low

Remains at Standard

Low

Medium

Changes from Standard to Important

Low or Medium

High

Changes from Standard or Important to Critical

Investigate privacy exposure directly in BlueXP classification

From within BlueXP ransomware protection, you can select a workload, view its details, and then investigate the exposure in BlueXP classification.

Steps
  1. From the BlueXP ransomware protection menu, select Protection.

  2. In the Protection page, locate the file share workload in the Workload column that shows a status in the Privacy exposure column.

    Protection page showing Privacy exposure column

  3. Select the workload in the Workload column to see its details.

    Workload details screen showing the Privacy exposure pane

  4. In the Workload details page, review the information in the Privacy exposure tile.

  5. To investigate the exposure in BlueXP classification, select Investigate.

    The BlueXP classification service opens to display the Investigation tab.

    BlueXP classification

  6. Review the information in the Investigation tab.

  7. To return to the BlueXP ransomware protection service, select Back to BlueXP ransomware protection.

For more information

For details about BlueXP classification, refer to the following BlueXP classification topics: